pull gems from https://rubygems.org instead of :rubygems
git ignore Gemfile.lock